Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/8B7FE8C4D87E11EE8DCE4749C4F9AE02.roa
File: 8B7FE8C4D87E11EE8DCE4749C4F9AE02.roa (raw, json)
Hash identifier: Yqo+NYlq+xqEIgQ9ubXR3ju91Q7OHZxwsJFZGAzE8wc=
Subject key identifier: 15:8E:A5:A3:64:41:7E:CB:75:D4:B0:DD:4B:6D:F4:87:FF:AB:05:E2
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 011C
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/8B7FE8C4D87E11EE8DCE4749C4F9AE02.roa
Signing time: Mon 25 Mar 2024 05:27:21 +0000
ROA not before: Mon 25 Mar 2024 05:27:21 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 395839
IP address blocks: 103.85.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Apr 2024 13:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Mar 25 05:27:21 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66010b38-7308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:31:f4:f2:2d:61:56:58:d9:b8:26:0b:ef:
94:93:4f:7d:d6:a8:72:6e:96:73:df:c1:89:a3:d0:
41:27:8e:c0:94:f9:ef:46:d6:b9:08:41:88:a5:a7:
68:2b:4d:f4:14:b4:97:8c:0a:1b:5e:41:f0:39:69:
32:64:da:5d:b4:a4:51:a1:ff:9e:f2:ce:ea:e1:a3:
d8:3c:f1:b4:7c:43:19:f7:4a:ea:1f:1f:64:12:fe:
d8:62:19:ae:f4:6c:8f:7e:26:e3:e9:3d:46:27:9e:
78:1f:d2:8e:b5:2b:17:2e:3c:cf:dc:8d:b3:c5:4a:
13:db:e1:bb:29:d2:0b:de:19:4b:63:43:65:67:06:
97:63:f3:bd:36:55:13:81:4f:cc:b7:68:41:17:be:
20:72:38:6e:24:67:8c:65:3e:57:7f:97:9a:b2:7e:
08:f8:80:be:db:cf:08:ed:44:57:6b:89:b6:a6:8b:
52:a0:86:a1:a3:51:df:67:7a:df:ea:90:5a:c3:6f:
a5:bf:08:b6:94:2e:de:1d:0f:b9:83:43:fe:29:48:
e8:78:c6:49:aa:e7:9b:fa:12:4c:24:3f:35:44:5e:
6f:aa:8b:6d:d7:7d:cb:5d:34:4f:ee:84:2f:71:32:
65:23:27:31:83:9b:cf:a5:93:5e:03:15:39:76:fb:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:A5:A3:64:41:7E:CB:75:D4:B0:DD:4B:6D:F4:87:FF:AB:05:E2
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/8B7FE8C4D87E11EE8DCE4749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:b7:65:92:94:25:05:73:96:ac:69:e0:47:82:43:5e:ac:ef:
eb:b9:8c:66:70:6a:3f:6d:f2:90:ac:d7:30:bc:b9:97:44:e7:
9c:ce:ea:44:97:e2:38:65:45:4f:f2:8c:2b:c9:ec:4f:47:e1:
c0:dd:82:ce:a4:36:21:7d:43:ad:14:91:fe:47:2f:2a:47:9c:
f2:75:50:1e:6f:46:c8:28:41:68:ea:cb:19:7c:56:09:73:49:
c2:cd:6b:01:c6:6c:bd:7a:e9:78:97:f2:fd:b7:67:e4:a7:ae:
70:ad:07:7f:af:b6:3c:5a:0d:22:5f:0a:3b:65:c6:19:b2:c0:
cb:4f:7d:49:38:19:09:9a:e3:14:64:4e:4a:b6:7c:5e:4e:76:
da:87:e8:39:c4:1d:1c:ae:80:c7:6c:f0:7c:e7:3f:bc:1a:e6:
8b:17:4b:31:b3:54:2b:69:29:ee:8f:93:a4:05:09:56:79:36:
91:5b:1c:83:cb:15:da:ad:8e:ba:40:b0:85:1e:f3:00:93:b3:
4c:61:0c:1e:89:46:82:61:ce:a4:79:fb:c5:72:d7:39:c4:be:
f1:6b:ae:54:fb:5e:a7:41:03:e8:dd:70:50:d6:58:01:6a:7d:
dd:10:d1:c2:be:90:5a:b1:40:79:e8:4e:05:b1:0a:e1:f7:3a:
69:f5:02:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF
MDIwNDg4RDQwHhcNMjQwMzI1MDUyNzIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjAxMGIzOC03MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwYx9PItYVZY2bgmC++Uk0991qhybpZz38GJo9BBJ47AlPnvRta5CEGIpado
K030FLSXjAobXkHwOWkyZNpdtKRRof+e8s7q4aPYPPG0fEMZ90rqHx9kEv7YYhmu
9GyPfibj6T1GJ554H9KOtSsXLjzP3I2zxUoT2+G7KdIL3hlLY0NlZwaXY/O9NlUT
gU/Mt2hBF74gcjhuJGeMZT5Xf5easn4I+IC+288I7URXa4m2potSoIaho1HfZ3rf
6pBaw2+lvwi2lC7eHQ+5g0P+KUjoeMZJqueb+hJMJD81RF5vqott133LXTRP7oQv
cTJlIycxg5vPpZNeAxU5dvsVoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBWOpaNk
QX7LddSw3Utt9If/qwXiMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz
MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTAxNUQvNkM0NzQ5MjA3MzEyMTFFREI3MEJDRTMzQzRGOUFFMDIvOEI3RkU4QzRE
ODdFMTFFRThEQ0U0NzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnVcgwDQYJKoZIhvcNAQELBQADggEBAKC3ZZKUJQVzlqxp
4EeCQ16s7+u5jGZwaj9t8pCs1zC8uZdE55zO6kSX4jhlRU/yjCvJ7E9H4cDdgs6k
NiF9Q60Ukf5HLypHnPJ1UB5vRsgoQWjqyxl8VglzScLNawHGbL166XiX8v23Z+Sn
rnCtB3+vtjxaDSJfCjtlxhmywMtPfUk4GQma4xRkTkq2fF5OdtqH6DnEHRyugMds
8HznP7wa5osXSzGzVCtpKe6Pk6QFCVZ5NpFbHIPLFdqtjrpAsIUe8wCTs0xhDB6J
RoJhzqR5+8Vy1znEvvFrrlT7XqdBA+jdcFDWWAFqfd0Q0cK+kFqxQHnoTgWxCuH3
Omn1AuE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org